> Le 1 mai 2016 à 04:26, Jim Pingle <[email protected]> a écrit : > > On 4/30/2016 6:57 AM, Olivier Mascia wrote: >> Sorry for having asked this question. >> While I had tried to find the answer before posting, I finally found the >> answer seconds later. >> >> https://doc.pfsense.org/index.php/IPv6_and_VPNs >> >> "Currently IPv6 with IPsec is functional, but traffic cannot be mixed >> families in a tunnel. Meaning, IPv6 traffic can only be carried inside a >> tunnel which has IPv6 endpoints, and IPv4 traffic can only be carried over a >> tunnel using IPv4 endpoints. A single tunnel cannot carry both types of >> traffic." > > That page is a little out of date in one respect: You can't mix traffic > with IPsec using IKEv1, but you can with IKEv2. So long as both sides > support IKEv2 you can carry IPv6 and IPv4 in P2 entries. > > FWIW, You can also tunnel both at once using OpenVPN.
I have had a performance issue with OpenVPN recently (though I used OpenVPN a lot in the past for remote access VPN and some point to point link over slow links). I started using IPsec for those two new links with higher performance and the results are excellent. Indeed I configured IKEv2 on both endpoints. So I should push the experience of adding a second phase2 for tunneling IPv6. Thanks ! -- Meilleures salutations, Met vriendelijke groeten, Best Regards, Olivier Mascia, integral.be/om _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
